https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 05:40:03 +0000 https://vulnerability.circl.lu/sighting/d0820085-8f3c-41b6-b3f5-456e70494b01/export {"uuid": "d0820085-8f3c-41b6-b3f5-456e70494b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvovw7zvgs2d", "content": "Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)\n\nA Linux privilege escalation vulnerability (CVE-2026-87886) affecting Acronis\u2019 backup extensions for cPanel, WebHost Manager (WHM), and Plesk, is being leveraged by attackers, the backup and recovery compan\u2026\n#hackernews #news", "creation_timestamp": "2026-09-17T05:22:31.652933Z"} {"uuid": "d0820085-8f3c-41b6-b3f5-456e70494b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvovw7zvgs2d", "content": "Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)\n\nA Linux privilege escalation vulnerability (CVE-2026-87886) affecting Acronis\u2019 backup extensions for cPanel, WebHost Manager (WHM), and Plesk, is being leveraged by attackers, the backup and recovery compan\u2026\n#hackernews #news", "creation_timestamp": "2026-09-17T05:22:31.652933Z"} https://vulnerability.circl.lu/sighting/d0820085-8f3c-41b6-b3f5-456e70494b01/export Thu, 17 Sep 2026 05:22:31 +0000 https://vulnerability.circl.lu/sighting/6438a939-afe6-4ad0-a052-fb6a1276d1e3/export {"uuid": "6438a939-afe6-4ad0-a052-fb6a1276d1e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://www.acn.gov.it/portale/w/acronis-rilevato-sfruttamento-in-rete-della-cve-2026-87886", "content": "Rilevato lo sfruttamento attivo in rete della vulnerabilit\u00e0 CVE-2026-87886 \u2013 gi\u00e0 sanata dal vendor \u2013 che interessa i plugin di backup Acronis per Plesk, cPanel e WHM. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-09-17T01:00:37.343064Z"} {"uuid": "6438a939-afe6-4ad0-a052-fb6a1276d1e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://www.acn.gov.it/portale/w/acronis-rilevato-sfruttamento-in-rete-della-cve-2026-87886", "content": "Rilevato lo sfruttamento attivo in rete della vulnerabilit\u00e0 CVE-2026-87886 \u2013 gi\u00e0 sanata dal vendor \u2013 che interessa i plugin di backup Acronis per Plesk, cPanel e WHM. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-09-17T01:00:37.343064Z"} https://vulnerability.circl.lu/sighting/6438a939-afe6-4ad0-a052-fb6a1276d1e3/export Thu, 17 Sep 2026 01:00:37 +0000 https://vulnerability.circl.lu/sighting/21bdf158-971a-4cc5-8d06-8f2c3b6eab58/export {"uuid": "21bdf158-971a-4cc5-8d06-8f2c3b6eab58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "content": "Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild.\n\nThe vulnerability, tracked as CVE-2026-87886 (CVSS score: 7.8), is described as a case of local privilege escalation due to insecure file permissions. It affects the following versions -\n\n\n Acronis Backup plugin for cPanel & WHM (Linux", "creation_timestamp": "2026-09-17T01:00:36.973443Z"} {"uuid": "21bdf158-971a-4cc5-8d06-8f2c3b6eab58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "content": "Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild.\n\nThe vulnerability, tracked as CVE-2026-87886 (CVSS score: 7.8), is described as a case of local privilege escalation due to insecure file permissions. It affects the following versions -\n\n\n Acronis Backup plugin for cPanel & WHM (Linux", "creation_timestamp": "2026-09-17T01:00:36.973443Z"} https://vulnerability.circl.lu/sighting/21bdf158-971a-4cc5-8d06-8f2c3b6eab58/export Thu, 17 Sep 2026 01:00:36 +0000 https://vulnerability.circl.lu/sighting/d8ebe859-0ab2-4a94-8949-607dd5dffbbd/export {"uuid": "d8ebe859-0ab2-4a94-8949-607dd5dffbbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/", "content": "CVE-2026-87886 is a high-severity insecure file permissions flaw that can lead to local privilege escalation.\n\nThe post Acronis Patches Exploited Vulnerability in cPanel Backup Plugin appeared first on SecurityWeek.", "creation_timestamp": "2026-09-17T01:00:36.638762Z"} {"uuid": "d8ebe859-0ab2-4a94-8949-607dd5dffbbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/", "content": "CVE-2026-87886 is a high-severity insecure file permissions flaw that can lead to local privilege escalation.\n\nThe post Acronis Patches Exploited Vulnerability in cPanel Backup Plugin appeared first on SecurityWeek.", "creation_timestamp": "2026-09-17T01:00:36.638762Z"} https://vulnerability.circl.lu/sighting/d8ebe859-0ab2-4a94-8949-607dd5dffbbd/export Thu, 17 Sep 2026 01:00:36 +0000 https://vulnerability.circl.lu/sighting/82d7d187-749c-4d7d-835c-5815d2117273/export {"uuid": "82d7d187-749c-4d7d-835c-5815d2117273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://t.me/thehackernews/10069", "content": "\u26a0\ufe0f Acronis Backup flaw exploited in limited targeted attacks.\n\nCVE-2026-87886 lets a low-privileged attacker escalate permissions on affected Linux cPanel/WHM and Plesk deployments. Fixes are available.\n\nWhich builds need updating \u2192 https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "creation_timestamp": "2026-09-17T01:00:04.300125Z"} {"uuid": "82d7d187-749c-4d7d-835c-5815d2117273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://t.me/thehackernews/10069", "content": "\u26a0\ufe0f Acronis Backup flaw exploited in limited targeted attacks.\n\nCVE-2026-87886 lets a low-privileged attacker escalate permissions on affected Linux cPanel/WHM and Plesk deployments. Fixes are available.\n\nWhich builds need updating \u2192 https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "creation_timestamp": "2026-09-17T01:00:04.300125Z"} https://vulnerability.circl.lu/sighting/82d7d187-749c-4d7d-835c-5815d2117273/export Thu, 17 Sep 2026 01:00:04 +0000 https://vulnerability.circl.lu/sighting/2d15e645-61f7-4941-b0f2-1a1301195db9/export {"uuid": "2d15e645-61f7-4941-b0f2-1a1301195db9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://t.me/information_security_channel/55925", "content": "Acronis Patches Exploited Vulnerability in cPanel Backup Plugin\nhttps://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/\n\nCVE-2026-87886 is a high-severity insecure file permissions flaw that can lead to local privilege escalation.\nThe post Acronis Patches Exploited Vulnerability in cPanel Backup Plugin (https://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-17T01:00:03.363497Z"} {"uuid": "2d15e645-61f7-4941-b0f2-1a1301195db9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://t.me/information_security_channel/55925", "content": "Acronis Patches Exploited Vulnerability in cPanel Backup Plugin\nhttps://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/\n\nCVE-2026-87886 is a high-severity insecure file permissions flaw that can lead to local privilege escalation.\nThe post Acronis Patches Exploited Vulnerability in cPanel Backup Plugin (https://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-17T01:00:03.363497Z"} https://vulnerability.circl.lu/sighting/2d15e645-61f7-4941-b0f2-1a1301195db9/export Thu, 17 Sep 2026 01:00:03 +0000 https://vulnerability.circl.lu/sighting/24708716-62fe-4db7-862d-a27b14317a60/export {"uuid": "24708716-62fe-4db7-862d-a27b14317a60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvof3zu2fl2e", "content": "Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)\uff08Acronis\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027\u3001\u6a19\u7684\u578b\u653b\u6483\u3067\u60aa\u7528\uff09 #HelpNetSecurity (Sep 16)\n\nwww.helpnetsecurity.com/2026/09/16/a...", "creation_timestamp": "2026-09-17T00:21:32.550526Z"} {"uuid": "24708716-62fe-4db7-862d-a27b14317a60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvof3zu2fl2e", "content": "Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)\uff08Acronis\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027\u3001\u6a19\u7684\u578b\u653b\u6483\u3067\u60aa\u7528\uff09 #HelpNetSecurity (Sep 16)\n\nwww.helpnetsecurity.com/2026/09/16/a...", "creation_timestamp": "2026-09-17T00:21:32.550526Z"} https://vulnerability.circl.lu/sighting/24708716-62fe-4db7-862d-a27b14317a60/export Thu, 17 Sep 2026 00:21:32 +0000 https://vulnerability.circl.lu/sighting/06e5b95c-d6c6-4295-87ff-f41d7d019699/export {"uuid": "06e5b95c-d6c6-4295-87ff-f41d7d019699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvoeznxypt2y", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\uff08CISA\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f2\u4ef6\u306e\u8106\u5f31\u6027\u3092KEV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\uff09 #CISA (Sep 16)\n\nCVE-2026-76460 Cisco Identity Services Engine\u306b\u304a\u3051\u308b\u7279\u6a29API\u306e\u4e0d\u9069\u5207\u306a\u4f7f\u7528\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\nCVE-2026-87886 Acronis Backup\u306e\u30c7\u30d5\u30a9\u30eb\u30c8\u6a29\u9650\u8a2d\u5b9a\u306e\u8aa4\u308a\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-09-17T00:20:12.550502Z"} {"uuid": "06e5b95c-d6c6-4295-87ff-f41d7d019699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvoeznxypt2y", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\uff08CISA\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f2\u4ef6\u306e\u8106\u5f31\u6027\u3092KEV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\uff09 #CISA (Sep 16)\n\nCVE-2026-76460 Cisco Identity Services Engine\u306b\u304a\u3051\u308b\u7279\u6a29API\u306e\u4e0d\u9069\u5207\u306a\u4f7f\u7528\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\nCVE-2026-87886 Acronis Backup\u306e\u30c7\u30d5\u30a9\u30eb\u30c8\u6a29\u9650\u8a2d\u5b9a\u306e\u8aa4\u308a\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-09-17T00:20:12.550502Z"} https://vulnerability.circl.lu/sighting/06e5b95c-d6c6-4295-87ff-f41d7d019699/export Thu, 17 Sep 2026 00:20:12 +0000 https://vulnerability.circl.lu/sighting/4deeb776-2d71-42d1-b7df-de7b01fdbddc/export {"uuid": "4deeb776-2d71-42d1-b7df-de7b01fdbddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvoaz7jf352l", "content": "Patch Acronis Backup for cPanel/WHM and Plesk on Linux now \u2014 CVE-2026-87886 (CVSS 7.8) privilege escalation is under active exploitation and on CISA's KEV list. https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "creation_timestamp": "2026-09-16T23:08:22.267263Z"} {"uuid": "4deeb776-2d71-42d1-b7df-de7b01fdbddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvoaz7jf352l", "content": "Patch Acronis Backup for cPanel/WHM and Plesk on Linux now \u2014 CVE-2026-87886 (CVSS 7.8) privilege escalation is under active exploitation and on CISA's KEV list. https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "creation_timestamp": "2026-09-16T23:08:22.267263Z"} https://vulnerability.circl.lu/sighting/4deeb776-2d71-42d1-b7df-de7b01fdbddc/export Wed, 16 Sep 2026 23:08:22 +0000 https://vulnerability.circl.lu/sighting/4772a0c1-b828-4957-b528-7afdc3121849/export {"uuid": "4772a0c1-b828-4957-b528-7afdc3121849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mvoaj3p3pn2x", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-87886: Acronis Backup Incorrect Default Permissions Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-87886", "creation_timestamp": "2026-09-16T22:59:21.786883Z"} {"uuid": "4772a0c1-b828-4957-b528-7afdc3121849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mvoaj3p3pn2x", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-87886: Acronis Backup Incorrect Default Permissions Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-87886", "creation_timestamp": "2026-09-16T22:59:21.786883Z"} https://vulnerability.circl.lu/sighting/4772a0c1-b828-4957-b528-7afdc3121849/export Wed, 16 Sep 2026 22:59:21 +0000